waterWang opened a new pull request, #71432:
URL: https://github.com/apache/airflow/pull/71432
## Summary
Adds the missing `--ssl-ciphers` CLI option to the Airflow API server,
allowing users to configure the SSL cipher suite for both Uvicorn and Gunicorn
backends.
## Changes
1. **CLI config** (`airflow-core/src/airflow/cli/cli_config.py`): Added
`ARG_SSL_CIPHERS` (`--ssl-ciphers`) argument and registered it in the
api-server command arg list.
2. **API server command**
(`airflow-core/src/airflow/cli/commands/api_server_command.py`):
- Pass `ssl_ciphers` to uvicorn as `ssl_ciphers` kwarg
- Pass `ssl_ciphers` to Gunicorn via `create_gunicorn_app`
3. **Gunicorn app**
(`airflow-core/src/airflow/api_fastapi/gunicorn_app.py`): Added `ssl_ciphers`
parameter to `create_gunicorn_app()` and set `options["ciphers"]` when provided.
4. **Config template**
(`airflow-core/src/airflow/config_templates/config.yml`): Added `ssl_ciphers`
config option under the `[api]` section.
5. **Tests**
(`airflow-core/tests/unit/cli/commands/test_api_server_command.py`): Updated
expected kwargs to include `ssl_ciphers=None`.
## Related issue
Closes #71426 — Missing SSL options for API Server
[fj4WqyCCw3C5ShR1RfB7MoBPTpkRrBFYP1uT35g3MvT]
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
